Reconfigure Microsoft Exchange Server to Use a Fully Qualified Domain Name

hmcnasty
hmcnasty used Ask the Experts™
on
Hi.
I have 2 clients running exchange server 2010.  
I needed to upgrade their exchange ssl certificates.  I was told when I was renewing them that certs can no longer contain the local name of the exchange server.  
So I renewed the certificates with only the outside domain name mail.yourcompany.com
I ran these commands in the exchange shell:

To change the Autodiscover URL, type the following command, and then press Enter:
    Set-ClientAccessServer -Identity main-fs -AutodiscoverServiceInternalUri https://mail.mycompany.com/autodiscover/autodiscover.xml

    To change the InternalUrl attribute of the EWS, type the following command, and then press Enter:
    Set-WebServicesVirtualDirectory -Identity "main-fs\EWS (Default Web Site)" -InternalUrl https://mail.mycompany.com/ews/exchange.asmx

    To change the InternalUrl attribute for Web-based Offline Address Book distribution, type the following command, and then press Enter:
    Set-OABVirtualDirectory -Identity "main-fs\oab (Default Web Site)" -InternalUrl https://mail.mycompany.com/oab
   
    To recycle the application pools, open IIS Manager.
    Expand the local computer, and then expand Application Pools.
    Right-click MSExchangeAutodiscoverAppPool, and then click Recycle.

Today the users are complaining about a cert popup in their local outlook clients.  

What do I need to do to fix this?

Wes
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Senior Solution Architect
Most Valuable Expert 2015
Top Expert 2015
Commented:
This is happening because you have not setup split dns in your internal domain. ONce you have setup Split DNS this cert popup issue will be resolved. I have created a HowTo for setting this up.

You also need to make sure that ALL internalURL's for all virtual directories have the same FQDN as external,  not just the ones that you have referenced in your question.

Configure Split DNS and Virtual Directories
http://www.wsit.ca/how-tos/exchange-server-2/configure-split-dns-and-exchange-2013-virtual-directories/

Will.

Author

Commented:
Thanks Will.  
When I put in the new zone name is it mail.mycompany.com or just mycompany.com?

Odd that godadddy did say I needed to do any of this for it to work.  Although not surprising I guess
Will SzymkowskiSenior Solution Architect
Most Valuable Expert 2015
Top Expert 2015

Commented:
You would create a new zone on your interal DNS for mycompany.com. Then you would create a Host (A) record for mail.mycompany.com and a cname for autodiscover.domain.com.

Will.
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Author

Commented:
never mind on that last question. I'll keep you posted

Author

Commented:
Ok done.  Do I need to adjust the clients at all?

Author

Commented:
Thanks Will.  This seems to work when I recreate the profiles manually using mail.mycompany.com However on the current clients the es reads exchangeserver.local
Will SzymkowskiSenior Solution Architect
Most Valuable Expert 2015
Top Expert 2015

Commented:
on client that are not working have you tried to run Test Email Auto Config to see if you are getting the correct URL's from Autodiscover?

This should not be required to re-create all of the profiles.

Will.

Author

Commented:
i think its ok now.  I created a new user in ad and a new mailbox ran outlook and it set it  up with no issues.   I think what gets me is if I go into the account properties i see the local name of the exchange server instead of mail.mydomain.com under the server name.
Does that matter?

Author

Commented:
of course i'm speaking about internal users

Author

Commented:
it is using autodiscover through the test email auto config

Author

Commented:
Hi Will.  It seems that some folks are still getting the cert error, however I created a new account and i don't get it.
The test email auto config shows the correct OWA link
The only thing that still shows the local server name in under protocol: Exchange PC
Will SzymkowskiSenior Solution Architect
Most Valuable Expert 2015
Top Expert 2015

Commented:
If you reload the profile for the users that are having this issue does it work for them?

Something seems to be cached on the machine.

Will.

Author

Commented:
I'm gonna try that next.  That has to be it.  Everything seems to be in place.

Wes

Author

Commented:
Thanks Will.  This works great.

Wes

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial